|
2781
|
- |
|
-
|
-
|
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly han…
|
CWE-22
Path Traversal
|
CVE-2026-6865
|
2026-05-12 23:19 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2782
|
8.2 |
HIGH
Local
|
-
|
-
|
Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A high privileged attack…
|
CWE-78
OS Command
|
CVE-2026-35071
|
2026-05-12 23:17 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2783
|
6.7 |
MEDIUM
Local
|
-
|
-
|
Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this v…
|
CWE-250
Execution with Unnecessary Privileges
|
CVE-2026-40638
|
2026-05-12 23:17 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2784
|
7.5 |
HIGH
Network
|
-
|
-
|
A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
|
-
|
CVE-2026-4890
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2785
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.
|
-
|
CVE-2026-4891
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2786
|
8.4 |
HIGH
Local
|
-
|
-
|
A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet.
|
-
|
CVE-2026-4892
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2787
|
5.3 |
MEDIUM
Network
|
-
|
-
|
An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.
|
-
|
CVE-2026-4893
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2788
|
- |
|
-
|
-
|
An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing le…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2026-35227
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2789
|
- |
|
-
|
-
|
A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unau…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-5029
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2790
|
- |
|
-
|
-
|
ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's br…
|
CWE-79
Cross-site Scripting
|
CVE-2026-6909
|
2026-05-12 23:15 |
2026-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|